Writing Policies That Aren’t Miserable for Everyone Involved скачать в хорошем качестве

Writing Policies That Aren’t Miserable for Everyone Involved

Setting good policies is a critical component of a security program, but getting employees to actually read and follow them can be a challenge. Especially with application security, setting consistent expectations for developers through policies is an important first step for any program. One company decided to try something new: scrapping their policies entirely and architecting a new way of presenting the information that is easier to write, easier to understand, and still meets all audit and compliance requirements. In this talk you will hear about the concepts behind this new approach to policies, see the impact it has had on the security of the company, and learn how to create your own policies in the new format.